{"id":17093,"date":"2017-05-22T21:29:06","date_gmt":"2017-05-22T20:29:06","guid":{"rendered":"https:\/\/www.bestonline.cz\/?p=17093"},"modified":"2021-05-11T23:27:40","modified_gmt":"2021-05-11T21:27:40","slug":"blokovani-exe-priloh-v-poste-office-365","status":"publish","type":"post","link":"https:\/\/www.bestonline.cz\/blokovani-exe-priloh-v-poste-office-365\/","title":{"rendered":"Blokov\u00e1n\u00ed EXE p\u0159\u00edloh v po\u0161t\u011b Office 365"},"content":{"rendered":"<p>\u00datoky na data u\u017eivatel\u016f ve form\u011b malware \u010di ransomware jsou st\u00e1le \u010dast\u011bj\u0161\u00ed. Jejich tv\u016frci \u010dasto s\u00e1zej\u00ed na nevzd\u011blanost u\u017eivatel\u016f a ti si je sami pou\u0161t\u011bj\u00ed ve form\u011b spustiteln\u00fdch program\u016f, kter\u00e9 dostanou do sv\u00e9 e-mailov\u00e9 schr\u00e1nky. Nejjednodu\u0161\u0161\u00ed cestou, jak tomu centr\u00e1ln\u011b zamezit je v Office 365 zablokovat e-maily s p\u0159\u00edlohami tohoto typu:<\/p>\n<ol>\n<li>Jako spr\u00e1vce \u00fa\u010dtu Office 365 si otev\u0159ete centrum pro spr\u00e1vu Exchange:<\/li>\n<\/ol>\n<p><a href=\"https:\/\/www.bestonline.cz\/wp-content\/uploads\/2017\/05\/disable-exe-1.png\"><img decoding=\"async\" class=\"alignnone wp-image-17096 size-full\" src=\"https:\/\/www.bestonline.cz\/wp-content\/uploads\/2017\/05\/disable-exe-1.png\" alt=\"\" width=\"403\" height=\"334\" title=\"\"><\/a><\/p>\n<p>2. Vytvo\u0159te nov\u00e9 pravidlo v kapitole <em>Tok po\u0161ty:<\/em><\/p>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-17095\" src=\"https:\/\/www.bestonline.cz\/wp-content\/uploads\/2017\/05\/disable-exe-2.png\" alt=\"\" width=\"611\" height=\"468\" title=\"\"><\/p>\n<p>3. Pravidlo nastavte jak vid\u00edte na obr\u00e1zku. M\u016f\u017eete zadat i jin\u00e9 typy a samoz\u0159ejm\u011b zvolit libovoln\u00fd text upozorn\u011bn\u00ed odesilateli nebo zpr\u00e1vu smazat bez v\u00fdstrahy:<\/p>\n<p><a href=\"https:\/\/www.bestonline.cz\/wp-content\/uploads\/2017\/05\/disable-exe-3.png\"><img decoding=\"async\" class=\"alignnone size-full wp-image-17094\" src=\"https:\/\/www.bestonline.cz\/wp-content\/uploads\/2017\/05\/disable-exe-3.png\" alt=\"\" width=\"706\" height=\"713\" title=\"\"><\/a><\/p>\n<p>4. Cca. po 15 minut\u00e1ch m\u016f\u017eete funkcionalitu vyzkou\u0161et odesl\u00e1n\u00edm z libovoln\u00e9 extern\u00ed adresy.<\/p>\n<hr \/>\n<p>Pamatujte pros\u00edm, \u017ee toto nen\u00ed ochrana proti \u0161kodliv\u00e9mu k\u00f3du, ale pouze jedna mo\u017enost, jak zamezit \u010dast\u00e9 form\u011b n\u00e1kazy.<\/p>\n<p>Nau\u010dte va\u0161e u\u017eivatele znalostn\u00ed minimum, jak se z\u00e1sadn\u011b nechovat na internetu:<\/p>\n<ul>\n<li><strong>Neotv\u00edrat e-maily nebo soubory v e-mailech od odes\u00edlatel\u016f, kter\u00e9 neznaj\u00ed.<\/strong><\/li>\n<li><strong>Neklikat na odkazy v e-mailech od odes\u00edlatel\u016f, kter\u00e9 neznaj\u00ed.<\/strong> Kdy\u017e si nejsou jist\u00ed, je lep\u0161\u00ed u odes\u00edlatele ov\u011b\u0159it, \u017ee odkaz je legitimn\u00ed d\u0159\u00edve, ne\u017e na n\u011bj kliknou.<\/li>\n<li><strong>Stejn\u011b obez\u0159etn\u011b je t\u0159eba p\u0159istupovat k soubor\u016fm zaslan\u00fdm messengery, dodan\u00fdm na flash disc\u00edch a podobn\u011b<\/strong>. Hacke\u0159i jsou dob\u0159\u00ed soci\u00e1ln\u00ed in\u017een\u00fd\u0159i a dok\u00e1\u017e\u00ed hledat skuliny v typick\u00fdch u\u017eivatelsk\u00fdch \u010dinnostech, kde ned\u00e1v\u00e1me pozor.<\/li>\n<li><strong>Nechodit na webov\u00e9 str\u00e1nky, kter\u00e9 neznaj\u00ed a b\u00fdt v\u017edy ve st\u0159ehu i na webov\u00fdch str\u00e1nk\u00e1ch, kter\u00e9 znaj\u00ed.<\/strong>\u00a0 Je t\u0159eba si kontrolovat spr\u00e1vnost URL adresy a nejen d\u016fv\u011b\u0159ovat zn\u00e1m\u00e9mu designu. Hacke\u0159i p\u0159ipravuj\u00ed str\u00e1nky, kter\u00e9 jsou od t\u011bch origin\u00e1ln\u00edch vzhledov\u011b nerozeznateln\u00e9, ale obsahuj\u00ed jejich malware.<\/li>\n<li><strong>M\u00edt v\u017edy aktu\u00e1ln\u00ed verzi podporovan\u00e9ho opera\u010dn\u00edho syst\u00e9mu, aktu\u00e1ln\u00ed antivirus a programy<\/strong>.<\/li>\n<li><strong>Samoz\u0159ejmost\u00ed je nikdy neinstalovat jin\u00e9, ne\u017e origin\u00e1ln\u00ed verze software od v\u00fdrobce. <\/strong>Tedy \u017e\u00e1dn\u00e9 neleg\u00e1ln\u00ed \"cracknut\u00e9\" verze z \u00falo\u017ei\u0161\u0165 nebo dokonce jejich \"otev\u00edra\u010de\" nebo gener\u00e1tory s\u00e9riov\u00fdch \u010d\u00edsel.<\/li>\n<\/ul>\n<p>Zabezpe\u010dte se na centr\u00e1ln\u00ed \u00farovni a za\u010dn\u011bte:<\/p>\n<ul>\n<li><strong>Blokovat spustiteln\u00e9 typy soubor\u016f p\u0159ich\u00e1zej\u00edc\u00edch p\u0159es e-mail (viz. n\u00e1\u0161 n\u00e1vod v\u00fd\u0161e), nebo blokovat p\u0159\u00edlohy zcela.<\/strong>\u00a0To zabr\u00e1n\u00ed\u00a0trojsk\u00fdm kon\u00edm \u0161\u00ed\u0159it se\u00a0pomoc\u00ed e-mailov\u00fdch p\u0159\u00edloh.<\/li>\n<li><strong>Zajistit centr\u00e1ln\u011b za\u0159\u00edzen\u00ed u\u017eivatel\u016f<\/strong>. M\u016f\u017eete pou\u017e\u00edt nap\u0159\u00edklad slu\u017ebu <a href=\"https:\/\/www.bestonline.cz\/microsoft-intune\/\">Intune<\/a>, kter\u00e1 zajist\u00ed i dal\u0161\u00ed ochrany (antivir, antimalware).<\/li>\n<li><strong>M\u00edt funk\u010dn\u00ed Deep Packet Inspection - hloubkovou inspekci paket\u016f - na ve\u0161ker\u00fd provoz v s\u00edti, a to i \u0161ifrovan\u00fd.<\/strong> Ta obvykle b\u011b\u017e\u00ed na firewallu a vyp\u00edn\u00e1 nebezpe\u010dn\u00e1 datov\u00e1 spojen\u00ed.<\/li>\n<li><strong>Z\u00e1lohovat, z\u00e1lohovat, z\u00e1lohovat.<\/strong> Pro centr\u00e1ln\u00ed z\u00e1lohu po\u0161ty, SharePointu a OneDrive pro firmy m\u016f\u017eete pou\u017e\u00edt nap\u0159\u00edklad slu\u017ebu <a href=\"https:\/\/www.bestonline.cz\/skykick-cloud-backup\/\">SkyKick<\/a>. \u00a0u\u017eivatel\u00e9 mus\u00ed bezpodm\u00edne\u010dn\u011b zn\u00e1t rozd\u00edl mezi z\u00e1lohou a synchronizac\u00ed do cloudu! A tak\u00e9 mus\u00ed v\u011bd\u011bt, \u017ee na z\u00e1lohovan\u00fdch sd\u00edlen\u00fdch \u00falo\u017ei\u0161t\u00edch jsou jejich data bezpe\u010dn\u011bj\u0161\u00ed ne\u017e na lok\u00e1ln\u00edm.<\/li>\n<li><strong>Centr\u00e1ln\u011b si ov\u011b\u0159te p\u0159id\u011blen\u00ed opr\u00e1vn\u011bn\u00ed ke\u00a0sd\u00edlen\u00fdm slo\u017ek\u00e1m na firemn\u00edch \u00falo\u017ei\u0161t\u00edch<\/strong>. Existuj\u00ed u\u017eivatel\u00e9, kte\u0159\u00ed maj\u00ed pln\u00fd p\u0159\u00edstup i tam, kam ho nepot\u0159ebuj\u00ed. \u0160ifrov\u00e1n\u00ed ransomware v\u0161ak pr\u00e1v\u011b jejich opr\u00e1vn\u011bn\u00ed mohou pou\u017e\u00edt aza\u0161ifrovat s\u00ed\u0165ov\u00e9 disky.<\/li>\n<li><strong>\u0160kolit sv\u00e9 zam\u011bstnance v oblasti bezpe\u010dnosti dat.<\/strong>\u00a0Jeden \u010dlov\u011bk klikne na \u0161patn\u00fd odkaz a potenci\u00e1ln\u011b ohroz\u00ed celou firmu. Nau\u010dte je pozn\u00e1vat varovn\u00e9 p\u0159\u00edznaky, na co d\u00e1vat pozor p\u0159ed otev\u0159en\u00edm p\u0159\u00edloh nebo klepnut\u00edm na odkazy a co d\u011blat, kdy\u017e se n\u011bco pokaz\u00ed.<\/li>\n<\/ul>\n<p>Dal\u0161\u00ed zdroje:<\/p>\n<ul>\n<li>https:\/\/blog.matrixforce.com\/2015\/03\/04\/cryptolocker-prevention-top-12-defenses-against-business-loss\/<\/li>\n<li>https:\/\/docs.microsoft.com\/en-us\/intune-classic\/deploy-use\/help-secure-windows-pcs-with-endpoint-protection-for-microsoft-intune<\/li>\n<li>https:\/\/blogs.technet.microsoft.com\/mmpc\/2016\/03\/22\/new-feature-in-office-2016-can-block-macros-and-help-prevent-infection\/<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>\u00datoky na data u\u017eivatel\u016f ve form\u011b malware \u010di ransomware jsou st\u00e1le \u010dast\u011bj\u0161\u00ed. Jejich tv\u016frci \u010dasto s\u00e1zej\u00ed na nevzd\u011blanost u\u017eivatel\u016f a ti si je sami pou\u0161t\u011bj\u00ed ve form\u011b spustiteln\u00fdch program\u016f, kter\u00e9 dostanou do sv\u00e9 e-mailov\u00e9 schr\u00e1nky.<\/p>\n","protected":false},"author":6,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[1],"tags":[],"acf":[],"_links":{"self":[{"href":"https:\/\/www.bestonline.cz\/wp-json\/wp\/v2\/posts\/17093"}],"collection":[{"href":"https:\/\/www.bestonline.cz\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.bestonline.cz\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.bestonline.cz\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.bestonline.cz\/wp-json\/wp\/v2\/comments?post=17093"}],"version-history":[{"count":1,"href":"https:\/\/www.bestonline.cz\/wp-json\/wp\/v2\/posts\/17093\/revisions"}],"predecessor-version":[{"id":60915,"href":"https:\/\/www.bestonline.cz\/wp-json\/wp\/v2\/posts\/17093\/revisions\/60915"}],"wp:attachment":[{"href":"https:\/\/www.bestonline.cz\/wp-json\/wp\/v2\/media?parent=17093"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.bestonline.cz\/wp-json\/wp\/v2\/categories?post=17093"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.bestonline.cz\/wp-json\/wp\/v2\/tags?post=17093"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}